SseboExpress Privacy Policy

How SseboExpress collects, uses, shares, and protects personal information.

Effective date: 17 August 2026 Document version: 2026-08-17

SseboExpress is operated by Robert Nsubuga, an individual trading as SseboExpress ("SseboExpress", "we", "us", or "our"). This policy explains how we handle personal information when you use the SseboExpress mobile application, websites, support channels, and related marketplace services (together, the "Service").

SseboExpress is a multi-category marketplace. It lets people browse and search listings, create accounts, save favourites, communicate, buy or request items and services, and—where enabled—publish and manage seller listings. Categories and transaction features may vary by location and release.

Version 1.0 is intended for availability in the United Arab Emirates, Uganda, and Kenya. This does not mean that every category, seller, delivery method, or payment method is available throughout all three countries.

1. Information we collect

Information you provide

• Account and profile information, including name, email address, telephone

number, password hash, profile image, account role, and preferences.

• Delivery, billing, listing, and seller-location information, including

addresses and coordinates you select or enter.

• Marketplace content, including listings, descriptions, prices, images,

reviews, questions, answers, favourites, and other content you submit.

• Communications, including buyer-seller messages, support requests, feedback,

attachments, and records of our responses.

• Transaction information, including orders, purchase history, returns,

refunds, payout status, payment-provider identifiers, and transaction status. Payment card details are handled by the enabled payment processor; we do not intentionally store full card numbers or card security codes.

• Verification information, such as identity or business evidence, only if a

verification feature is enabled and you choose or are required to use it. This feature is not part of the current version 1.0 release scope.

Information collected through use of the Service

• Search history, recent views, product interactions, cart activity, feature

usage, and first-party analytics events.

• Device and technical information, including app and operating-system version,

device or installation identifiers, IP address, session information, and push notification token.

• Diagnostics, including crash reports, error messages, performance timings,

and related technical context.

• Precise location when you grant permission and use a location feature. You can

deny location access and enter an address or location manually where the product flow permits it.

• Camera and photo-library content only when you choose to scan, take, select,

upload, or save an image using a supported feature.

We do not use the submitted mobile app for third-party advertising tracking, and we do not sell personal information. If this practice changes, we will update this policy and the relevant consent and store disclosures before using the data for that purpose.

2. How we use information

We use information to:

• create, authenticate, secure, and support accounts;
• operate marketplace search, listings, favourites, chat, checkout, orders,

delivery, returns, refunds, seller tools, and support;

• process and reconcile payments and seller payouts through enabled providers;
• show relevant locations, listings, categories, and recommendations;
• send account, order, chat, security, service, email, SMS, push, and in-app

notifications according to availability and your preferences;

• prevent fraud, abuse, prohibited listings, and security incidents;
• moderate content, investigate disputes, enforce our terms, and meet legal

obligations;

• measure use, diagnose failures, and improve reliability and marketplace

features; and

• protect our users, sellers, Service, and legal rights.

Where applicable law requires it, we rely on one or more lawful bases such as performance of a contract, legitimate interests, compliance with law, or your consent. The applicable basis depends on the information, purpose, and country.

3. When we disclose information

We may disclose information:

• to buyers, sellers, or service providers as needed to complete a marketplace

interaction, subject to the visibility and contact controls offered by the Service;

• to infrastructure and operational providers that host data, deliver media,

process payments, provide maps or geocoding, send email/SMS/push messages, support search, or help secure and operate the Service;

• to professional advisers, auditors, insurers, regulators, law-enforcement

bodies, courts, or other parties when reasonably necessary or legally required;

• in connection with a merger, financing, reorganisation, sale, or transfer of

all or part of the business, subject to appropriate safeguards; and

• with your direction or consent.

Current provider categories include payment processing (including Stripe and, where enabled, other displayed payment providers), Firebase push messaging, cloud hosting and storage, database and cache infrastructure, media delivery, maps/geocoding, search infrastructure, and email or SMS delivery. Provider availability can vary by country and release.

Public listings and reviews are designed to be visible to other users. Do not place confidential or unnecessary personal information in public content.

4. International processing

Our users, infrastructure, and providers may be located in different countries. Information may therefore be processed outside the country in which you live. Where required, we use an appropriate transfer mechanism or other safeguards. We do not rely on a statement that merely using the Service constitutes consent where applicable law requires another safeguard.

5. Retention

We retain personal information only as long as reasonably necessary for the purposes described here, including providing the Service, resolving disputes, maintaining security, preventing fraud, and satisfying accounting, tax, regulatory, and legal obligations.

Operational records have different lifetimes. Some transient search, diagnostic, security, verification, and event records expire under configured schedules, while orders, payment ledgers, invoices, disputes, moderation records, and legally required evidence may need longer retention. After a verified account-deletion request, we aim to delete or anonymise account data that is no longer required within 30 days. This period does not override a longer retention duty or the time reasonably needed to resolve an active transaction, dispute, fraud investigation, security incident, or legal claim.

When retention is no longer necessary, we delete or anonymise information using reasonable measures. Data may persist temporarily in backups until overwritten under the backup cycle.

6. Your choices and rights

Depending on your location, you may have rights to request access, correction, deletion, restriction, objection, portability, withdrawal of consent, or a copy of personal information. You may also complain to an applicable data-protection authority.

You can update certain profile information and notification preferences in the app. You can initiate account deletion from the account/profile settings. See https://www.sseboexpress.com/account-deletion for instructions and retention exceptions. You may also contact us using the details below.

We may need to verify your identity before completing a request. Rights can be limited where we must retain information or where another lawful exception applies.

7. Security

We use administrative, technical, and organisational safeguards designed to protect information, including access controls, encrypted network transport, credential protection, monitoring, and restricted storage for sensitive evidence. No system is completely secure, so we cannot guarantee absolute security.

8. Children

The Service is not intended for anyone under 18 years of age, and such a person may not create an account, buy, sell, or submit listings. If you believe a child provided personal information contrary to this rule, contact us so we can investigate and take appropriate action.

9. Third-party services and links

Listings or messages may link to services we do not control. Their privacy practices are governed by their own policies. SseboExpress is not responsible for a third party's independent processing.

10. Changes to this policy

We may update this policy when the Service, providers, or legal requirements change. We will post the revised date and provide additional notice where required. Material changes apply prospectively unless the law permits otherwise.

11. Contact

Privacy questions and rights requests:

• Operator: Robert Nsubuga, trading as SseboExpress
• Email: support@sseboexpress.com
• Operating location: United Arab Emirates